CVE-2026-73924: Helidon Deserialization Config Resource Lookupcve-2026-73924-helidon-deserialization-config-resource-lookup
Direct ClassLoader.getResources lookup for deserialization configuration files (e.g., 'META-INF/helidon/serial-config.properties') can lead to missing filter rules when packaged in single/fat JARs due to resource path collisions. Use MetadataDiscovery to aggregate metadata instead.